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(54) In-band/out-of-band alert delivery system. 

(57) An in-band/out-of-band alert delivery system 
for a computer system manager Includes an 
alert log which maintains a record of alerts to be 
delivered and the status of those alerts, an alert 
manager for making a first attempt to deliver 
each alertr and a retry manager for making 
subsequent attempts to deliver alerts as be- 
comes necessary and appropriate. The alert 
delivery system may also include a bus master 
interface manager for making in-band alert de- 
liveries and a communications manager for 
making out-of-band alert deliveries. Telephone 
numbers are provided to the communications 
manager by an alert destination list Out-of- 
band alert deliveries may be made via a modem, 
a universal asynchronous receiver transmitter, 
or the Ike. 
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The present invention relates to hardware manageability support systems in network environments. More 
particularly, the present invention relates to systems that deliver alerts in local area network, wide area net- 
work, enterprise network environments, and the like. 

In its simplest form, data communication takes place between two devices that are directly connected by 

5 some form of point-to-point transmission medium. However, in certain instances it is impractical for two devices 
or components to be directly, point-to-point connected. An example of such an instance is when there are a 
sot of devices, each of which may require a link to many of the others at various times. This problem has been 
heretofore addressed by attaching multiple devices to a communication network. Each device, or station, is 
attached to a network node. The set of nodes to which stations attach is the boundary of a communication net- 

10 work that is capable of transferring data between pars of stations. 

Communication networks may be categorized based on the architecture and the techniques used to trans- 
fer data. Two major different types of communication networks are switched networks and broadcast networks. 
Switched networks involve transfer of data from a source to a destination through a series of intermediate nodes ' 
that provide a switching facility to move the data from node to node. Examples of switched communication net- 

15 works include circuit switched networks, message switched networks, and packet switched networks. Broad- 
cast networks involve no intermediate switching nodes; each station has a transmitter/receiver that allows com- 
munication over a common medium, so that a transmission from any one station is broadcast to and received 
by all other stations in the network. Examples of broadcast communication networks include packet radio net- 
works, satellite networks, and local networks. 

20 The present invention is especially designed to operate in packet-broadcasting networks such as local area 

networks CLANS"), wide area networks ("WANS'), enterprise network environments ("enterprise environ- 
ments") and the like. As those skilled in the art should appreciate, the terms LANs, WANs and enterprise en- 
vironments have constantly evolving meanings. In general, however, a LAN is a general- purpose local network 
supporting personal computers ("PCs"), a WAN is a general-purpose network supporting a wide area relative 

25 to a LAN (usually because it passes through a public switched telephone network at least in part), and an en- 
terprise environment is a general-purpose network supporting mini computers and mainframes. LANs, WANs, 
and enterprise environments can also support any number of other peripherals (e.g., printers), and quite often 
carry voice, video, and graphics as well as data. To assist those presently familiar with and skilled in the art 
in understanding what is meant by the various network terms used herein, the term LAN as used herein en- 

30 compasses Novell NetWare, SCO UNIX, Banyan VINES, Microsoft LAN Manager, and the like. Further, the 
term enterprise environment as used herein encompasses IBM SNA Management Services, DEC Enterprise 
Management Architecture, AT&T Unified Network Management Architecture, SNMP-Based Management Sta- 
tions, Hewlett-Packard's OPENV1EW, and the like. 

As will become apparent from the detailed description of the invention section below, the present invention 

35 may be viewed as an alert delivery system servicing a number of system components that supplement con- 
ventional network components to enhance management functions. These conventional network components 
include network management agents and network manager consoles. Underlying both of these components 
is a network operating system ("OS"). The OS is software, firmware, or hardware that controls the execution 
of processes in a system. Services provided by an OS can include resource allocation scheduling, input/output 

40 control, and data management The theory behind an OS is to provide support in a single spot so that each 
program does not need to be concerned with controlling hardware. A network management agent is a part of 
the OS. The network management agent is the central collection point for a particular server's network man- 
agement information. Typically, the information is stored in an object oriented format for use by "network man- 
ager" software that runs on the network such as a remote console or IBM's Netview. A network manager con- 

45 sole, the second component mentioned above, is generally provided as an optional component piece of an OS 
network management package. Typically, the network manager console allows one central point of monitoring 
and control for a network administrator's domain of interest From the console the administrator can view and 
control the objects registered with the network management agent The network manager console represents 
one type of manager software connected over the internet (Le., interconnected networks) with the network 

so management agent Other network manager software can also make use of the information in the management 
agent 

Two other concepts that should be fully understood to appreciate the present invention are "in-band" and 
■out-of-band". The term in-band is used herein to refer to signals sent via network management software re- 
siding locally on the server. In simple terms, in-band refers to use of the wire that comes with a network. The 
55 term out-of-band refers to communications that leave the computer system manager (discussed at length in 
the related case so titled) via an asynchronous port Although the out-of-band concept will be discussed in much 
greater detail below, it should be appreciated that asynchronous transmission is involved, that is, transmission 
in which each information character is individually synchronized, usually by the use of start elements and stop 
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Although network managers have heretofore been able to provide an acceptable level of network man- 
agement, the constant improvements being made in networks betray the fact that many improvements can still 
yet be made. For example, it is important that the system software or the network manager be notified about 
significant or potentially significant events occuring or about to occur in the network. Alerts perform such a 
function. However, prior art alert delivery systems have a number of shortcomings and defects. For example, 
prior art alert delivery systems are limited as to the number and types of alert receivers, the alert transmission 
media that can be used, capability for retrying, and effectiveness of the underlying algorithm, to name just a 
few. 

The present invention overcomes the shortcomings and deficiencies of the prior art by providing an in- 
band/out-of-band alert delivery system for a computer system manager including an alert log which maintains 
a record of alerts to be delivered and the status of those alerts, an alert manager for making a first attempt to 
deliver each alert, and a retry manager for making subsequent attempts to deliver alerts as becomes necessary 
and appropriate. 

In embodiments of the alert delivery system of the present invention there may be a bus master interface 
manager for making in-band alert deliveries and a communications manager for making out-of-band alert de- 
liveries. Telephone numbers may be provided to the communications manager by an alert destination list Out- 
of-band alert deliveries may be made via a modem, a universal asynchronous receiver transmitter, or the like. 

According to the teachings of the present invention, out-of-band deliveries may be made to payers, tele- 
phones and remote consoles via asynchronous lines. The underlying algorithm in embodiments of the present 
invention is designed for maximum success rate, via exhaustive retrying, in delivering alerts. 

Accordingly, it is an object of the present invention to provide an improved alert delivery system for incor- 
poration into data communication network environments. 

Another object of the present invention is to provide an in-band/out-of-band alert delivery system with a 
persistent retrying capability. 

Yet another object of the present invention is to provide an in-band/out-of-band alert delivery system for 
a computer system manager that is able to deliver alerts to many different types of alert receivers including 
pagers, telephones and remote consoles. 

Still yet another object of the present invention is to provide an in-band/out-of-band alert delivery system 
for a computer system manager which operates based upon a very effective "underlying" algorithm. 

Other objects, advantages, and novel features of the present invention will become apparent from the fol- 
lowing detailed description of the invention when considered in conjunction with the accompanying drawings 
wherein: 

FIG. 1 is a block diagram of a computer network having an EISA based computer system and a computer 
system manager board installed therein; 

FIG. 2 is a block diagram of portions of the EISA system board of FIG. 1 which illustrates information flow 
to and from, as well as within, the board; 

FIG. 3 is a flow diagram Qlustrating decisional processes in an embodiment of the alert delivery system 
according to the teachings of the present invention; and 

FIG. 4 is a flow chart depicting the logic employed in an embodiment of the present invention. 

As discussed in detail in other of the related cases referenced above, the management system in which 
the alert delivery system discussed herein may be incorporated is in one embodiment a system of hardware 
and software components that provide enhanced hardware management capabilities for EISA-based systems. 
In this embodiment, the management system is designed to be incorporated into LANS, WANS, enterprise en- 
vironments, and the like. f 

In greater detail, and as also discussed in greater detail in other of the related cases referenced above, 
in various embodiments the system of hardware and software components can include a 32-Bit intelligent Bus 
Master EISA board and firmware, an OS device driver, a remote asynchronous driver, a remote asynchronous 
console program, and configuration support These components are coupled with a network management 
agent and a network manager console, both of which are discussed in the description of related art section 
above, so as to provide enhanced hardware management capabilities. Because these various components are 
discussed in detail in other of the related cases referenced above, they will not be discussed in detail herein. 
However, it may be noted that the 32-Bit intell igent Bus Master EISA board and firmware provides the hardware 
and firmware support for alerting controlling and monitoring functions, which functions are discussed further 
below as well as in the related cases. The OS device driver, a component which is necessary for each supported 
operating system, is a mechanism for providing two-way communication between a network management 
agent running on the operating system and the system manager hardware. The remote asynchronous driver 
is a mechanism for enabling access to the 32-Bit intelligent Bus Master EISA board mentioned above through 
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an asynchronous connection. Further, the remote asynchronous driver enables remote console software op- 
eration as discussed in other of the related cases referenced above. The remote asynchronous console pro- 
gram is a software component that executes on any PC connected to a modem or asynchronous interface of 
the system manager. This software interacts with the 32-Bit intelligent Bus Master EISA board by calling a res- 

5 ktent asynchronous driver API that has a protocol link with an asynchronous or modem port of the system man- 
ager. The API allows remote control (e.g., rebooting), access to stored data, and a remote console function. 
The remote console emulation (text mode only) is independent of the system and OS allowing significant func- 
tionality without the support of the network or operating system. Remote console emulation is the express sub- 
ject matter of related U.S. Patent Application Serial No. (Atty. Docket No. 09447/0070) 

io incorporated herein. All out-of-band accesses to the modem or asynchronous interface of the system manager 
can be made to require security checks before access is allowed. The final component of the management 
system listed above, configuration support, involves configuring the 32-Bit intelligent Bus Master EISA board 
into an EISA system using an EISA configuration utility with corresponding and appropriate files. Default set- 
tings for the cards' configurable options can be stored in the host EISA nonvolatile memory. The management 

15 system may also require runtime configuration, possibly remotely, to set thresholds for alerting temperatures 
and other specific configuration options discussed further below. These configuration commands can be made 
available at various points throughout the management system. 

The system manager described in the immediately preceding paragraph can perform a number of func- 
tions. Four of the many functions it can perform are alerting, monitoring, remote management, and histories. 

20 Although alerting wil be discussed in great detail below, it may be noted at this point that the management 
system discussed in general in the various related applications is able to dial a preconf igured telephone number 
and report important events, that is, to alert. Alerting can be accomplished by any of the following methods: 
by sending a protocol message over a switch telephone connection or through a direct serial connection, by 
dialing a phone number associated with a pager, and/or by dialing a phone number associated with a person 

25 and leaving a synthesized voice message. The foregoing list is not exhaustive as will be discussed further be- 
low. 

The second function mentioned above, monitoring, is the ability of the system to monitor system compo- 
nents and parameters. Simply, this means that if a component experiences a failure, or exhibits characteristics 
that indicate that it might have a fa Sure, portions of the management system can detect this and report it to a 

30 system software entity that can, in turn, report the information to a network administrator so that corrective 
action can be taken. Three examples of a multitude of system components and parameters that can be moni- 
tored by the management system include system power, internal temperature, and memory refresh and parity. 
In all three of these examples alerts or portions of the alerting system may be involved. For example, if the 
system detects a drop in system power (i.e., below some predefined threshold), it may report the event as an 

35 alert Likewise, if the temperature rises above a predetermined threshold, the system may issue an alert Still 
further, if the system detects the absence of memory refresh signals or a memory parity error, it may issue an 
alert In general, associated with the various system objects within the system may be a capability to provide 
generic thresholding and alerting. That is, if some counter or value within a system object exceeds a threshold, 
the system can automatically send an alert either locally or through one or both of its serial ports. 

40 The remote management function refers to the ability to provide remote management of a server. As pre- 
viously discussed, alerting is a function that may be provided remotely. Additionally, the management system 
can, in some embodiments, recognize a small list of tones over its modem connection. These tones may be 
used to issue commands. For example, when the management system issues an alert over a model using voice 
synthesis, a touchtone command may be used to "acknowledge" the alert 

45 Based upon the foregoing, it should be readily apparent to those skilled in the art that the management 
system discussed in this and the various related cases has an alert delivery system, which alert delivery system 
is not only important independently, but which system is also important because its capabilities and operations 
management permeate and influence various other components throughout the system. With that in mind, the 
alert system may now be discussed in detail. 

so Referring initially to FIG. 1, an extended industry standard architecture ("EISA") based computer network 
1 0 is shown therein. The computer network 10 includes an EISA server 12 and an EISA board/bus 13. Installed 
on the EISA system board 1 3 are a plurality of cards including a system manager 22, an EISA network interface 
adapter 24, and an intelligent disk array controller device 26. Also running on the EISA server 12 is a network 
operating system 14, preferably one which includes a network management agent 15. Two-way communication 

55 between the system manager 22 and the network management agent 15 is provided by a system manager 
device driver 16. In a similar manner, a network interface device driver 18 interconnects the network manage- 
ment agent 14 and the EISA network interface adapter 24, and an intelligent disk array controller device driver 
20 interconnects the network operating system 14 and the intelligent disk array controller device 26. Also shown 
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in FIG. 1 are three terminals connected to the overall network 1 0. Terminal 30 is connected to the EISA network 
interface adapter 24 via EISA bus 28. Terminal or network manager console 34 is connected to the system 
manager 22 via an synchronous (out-of-band) line 40. Finally, terminal or network manager console 361s <x*>- 
nected to the network operating system 14 via inter-network communication (in-band) line 42. The network 

5 manager console 34 may operate in either a remote or an out-of-band local mode. The network manager con- 
sole 36 operates only in a local mode. 

Alerts are used to notify system software or a network administrator about important events. For example, 
if the host experiences a power failure, the enhancement or EISA system board 13 detects the loss of power 
and sends an alert. As heretofore mentioned, there are two types of alerting: in-band or out-of-band. In-band 

10 alerts are sent to software residing locally on the server 12 with the enhancement board 13. If an alert is to 
be delivered in and out-of-band, one or the other (typically the in-band alert) may be delivered first Out-of- 
band alerts are sent through the EISA system board's asynchronous port (designated by reference numeral 
44 in FIG. 1) to a remote application. These alerts include alerts sent to a remote console, a phone, or a pager. 
Referring now to FIG. 2, further details regarding the alert system are set forth therein. In that FIG. it may 

15 be seen that asynchronous lines 46, 48, 50 may exist between the EISA system board 13 and a pager 52, a 
telephone 54 and a console 56, respectively. Although further details will be provided below, it may be noted 
in FIG. 2 that from a functional point of view, the EISA system board 13 includes an alert management controller 
or alert manager 58 which can trigger operation of a modem 60 with voice capability 62 as appropriate based 
upon comparison of values obtained from a bus monitor 62 and threshold values in an object data file 64. 

20 Referring now to FIG. 3, there is shown a flow diagram illustrating decisional processes in embodiments 

of the alert delivery system according to the teachings of the present invention. Operation of the alert delivery 
system according to the teachings of the present invention begins with generation of an alert and delivery of 
that alert to the alert manager (discussed above with respect to FIG. 2). Promptly upon receiving a new alert, 
the alert manager 58 has the fact that the alert was received entered into an alert log 66. The alert manager 

25 58 then makes a first effort to deliver the alert, either in-band via a bus master interface master 68 (a card 
between software layers and hardware in the management system) or out-of-band via a communications man- 
ager 70. The communications manager 70 may, and likely would be, a piece of code in board 13. Telephone 
numbers are required to deliver out-of-band alerts; thus, an alert destination list 72, comprising such numbers, 
is associated with the alert manager 56 and the communication manager 70 to transmit as and when appro- 

30 priate, telephone numbers for out-of-band alerts. The communications manager 70 may direct the operation 
of other components to deliver out-of-band alerts. Such components may be a modem 72 and/or a universal 
asynchronous receiver transmitter ("UART") 74 as shown in FIG. 3. 

A very important aspect of the present invention is also shown in FIG. 3. This aspect is a retry capability. 
Quite often alerts are not satisfactory delivered the first time they are sent For example, no one may be sitting 

35 at a particular terminal where an alert is delivered or no one may answer a telephone call via which an out-of- 
band alert delivery is being attempted. The present invention overcomes this problem by including a retry man- 
ager 76. The retry manager 76, like the alert manager 58, has access to the alert log 66 so that it can both 
note that an alert needs to be delivered and update the alert log status when an alert is properly delivered. 
Assuming that the alert manager 58 fails in its attempt to deliver an alert, the retry manager 76 can detect that 

40 feet via the alert log 66 and itself attempt to deliver the alert, whether in-band or out-of-band. Retry manager 
timing is provided by a system kernel 78. In theory the retry manager can continue attempting to deliver an 
alert at predetermined intervals until the alert is delivered. Once the alert is delivered, entry of that fact in the 
art log 66 can terminate the delivery processes. 

Before discussing the alert delivery system of the present invention in detailed functional terms, a few com- 

45 ments about alert generation may be helpful and, thus, follow. The various system components being monitored 
by a system manager may be grouped into classes. Each system component within a given class may be re- 
ferred to as an object All objects consist of attributes that describe the status of the object In such a case 
there may be three types of attributes that can cause alerts: a counter, a state, and a threshold. 

Alerts may be caused when current values exceed boundaries that have been set The current values 

so change when the attributes are, e.g., incremented, decremented, updated, reset or modified. When a current 
value comes back into boundaries set for it and then travels outside those boundaries again, another alert may 
be generated. In addition to the above operations, an alert may be caused if the attribute is created with alert 
conditions already present The following table is an example of a threshold attribute. 
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(byte - Attribute ID) 






1 (Enable) 


0(ln> 


l(Out) 


Kres) 


1 (internal) 


0(Res) 


0(Res) 


0(host notify) 


1 (meaning) 


1 (meaning) 


1 (meaning) 


l(sev) 


l(sev) 


0(type) 


Ktype) 


0(type) 


6 






(byte - voice error message) 


"System Voltage" 


(16 byte label) 








0 






(2 bytes next offset) 






4750 






(4 byte lew threshold) 






5250 






(4 byte high threshold) 






5000 






(4 byte default value) 






5500 






(4 byte current value) 






052091 






(3 byte date: Mcnth/Day/Year) 


123033 






(3 byte time) 









30 The meaning bits specify if an alert will occur when the current value is equal to, or within the thresholds. 

In the example, the voltage thresholds are 4750 mv and 5250 mv. The meaning bits (111) specify that an alert 
should be signaled when the voltage is outside of the threshold values. The example is set for an out-of-band 
alert, with, as w3l be discussed further below, attribute logging and host notification on. 
An example of an alert structure command is as follows: 
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Ocranand (40h) (byte) 



Object ID (4 bytes) 



Instance (byte) 



Attribute ID (byte) 



Attribute type (2 bytes) 



Voice Error message / (byte) 



Object label (16 bytes) 



Attribute label (16 bytes) 



Class (4 bytes) 



Date (3 bytes) 



Time (3 bytes) 



Current Value (4 bytes) 



Limit Value (4 bytes) 



Optional value (4 bytes) 



To assist those skilled in the art in fully understanding the present invention, and to provide an example 
embodiment of the present invention with a number of unique aspects and advantages, affects of other com- 
mands in an embodiment of the present invention will now be discussed. 

In one embodiment of the present invention, alerts are stored in the alert log 66 along with their status. 
The status of these alerts is affects by three commands: Get Alert Log, Load Configuration, and Feature Con- 
trol. 

When Get Alert Log is issued from the host, it affects the status of in-band alerts. The alert log 66 affects 
out-of-band status when the command is issued from a remote application. When the Get Alert Log is issued 
all the alerts for that band are considered delivered since all the information given in response to Get Alert Log 
is the same information delivered for a single alert delivery. 

The intent of the Get Alert Log command is to provide the user a way to terminate alert delivery while re- 
taining an alert history that is provided in the alert log 66; by marking the alerts Done after viewing alerts in 
the log, this goal is achieved. 

If the Load Configuration command contains a new alert destination list, all current destination member 
references in the alert log 66 become invalid. Out-of-band members are referenced by index only and because 
the indexed destination member in the new list has no correlation to the member in the old list, the board 13 
must invalidate the alert entry. Note: The alert itself is still retained, but its delivery status becomes invalid. 

Alerting can be disabled by the Feature Control command. If disabled, all current alert log entries will be 
marked Invalid for both bands. New alerts will be discarded until alerting is re-enabled. 

Continuing to discuss a particular embodiment of an alert delivery system according to the teachings of 
the present invention, the alert log 66 itself has two main sections for each alert; an alert delivery status section 
and a destination member status section. 

The following table illustrates the parts of each alert log entry. 
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Alert log 


Alert fl 


Alert Delivery Status Byte 






In-band 


Out-ofHband 




Destirwticn Mater Status — 0 tlmcnygi 15 


(Bits 7-3) Number 
of retries left far 
member (0) 


status2 (Bit 2) 


statusl (Bit 1) 


statusO (Bit 0) 












i 


• 
• 




(Bits 7-3) Number 
of retries left for 
member (15) 


status2 (Bit 2) 


statusl (Bit 1) 


statusO (Bit 0) 



The alert delivery status section describes the alert status for the entire alert, i.e. whether the alert has 
25 completed the process through the entire destination member list The alert may be: 
o Pending (i.e. .queued, but not sent Status = 2.) 

o Done (successfully delivered in-band; retry count has been met or successful delivery for all out-of-band 
members. Status = 5.) 

o Failed (could not be delivered. Status = 4.) 
30 o Invalid (wil not be delivered ever. Status = OAh.) 

o Not °one (either retry is processing, or not all alert destination members have received this alert Status 
= 4 or 7) 

With respect to the destination member status section, at configuration, an alert destination list is defined 
which contains the phone numbers and all pertinent information needed to send an alert Each member that 
35 should receive the alert has a status in the alert log destination member status. If a remote calls in that is not 
in the destination list, no alerts will be delivered to that remote. 

Describing the embodiment of the present invention being discussed functionally, when the Get Alert Log 
command is issued from the host (i.e., via terminal 36 in FIG. 1), the alert log will appear as it is at that time. 
Right after viewing, several changes occur within the log, and the status of alerts change. These changes occur 
40 only on those alert entries that are viewed. The changes will show when the Get Alert Log command is issued 
again. 

1 . Once the alert type Failed, (Status = 4) has bee n viewed it wil be marked Success (Status = 5) because 
that entry in the alert log has been viewed, it is considered delivered. This holds true for in-band alerts 
only. 

45 2. When the Get Alert Log is issued, the following in-band alerts will not change: 
o pending (no attempt has been made to deliver yet Status = 2.) 
o processing (in the process of being delivered. Status = 3.) or 
o invalid (will not be delivered. Status = OAh.) 
The following effects are valid at the time the Get Alert Log command is issued. 
so 1. The alert log will not contain entries for alerts that were in the process of being added to the alert log. 

For instance, if the alert log had previously stabilized at 32 entries, and the command is issued while a 
new alert entry is being built, only 31 will be returned. One will be displaced (note that only 32 entries are 
allowed in this embodiment of the present invention) and the new one is not yet valid. 

2. If the buffer size is not big enough to contain all the alerts, only the number of entries that fit will be 
55 returned. An error code (13h) "not enough buffer size" will be returned. 

3. If the user requests more log entries than currently exist in the alert log, only those in the log will be 
returned. If the user requests more than 32 entries, an "invalid log number* (18h) error code will be re- 
turned. 
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If the user requests more than 32 entries and the buffer size is not big enough to contain all alerts, 
the buffer size error overrides the 'invalid log number error". Only the "host buffer size not large enough" 
error 1 3h will be returned. 

4. If more alerts have been generated than the alert buffer can hold, new alerts will be discarded and a 
s log overrun (01 h) will show on the Extended Error code when the Get Alert Log command is issued. The 

log overrun will be cleared after each Get Alert Log. 

The alert log is a circular buffer. A maximum of 32 entries, as previously mentioned, are allowed in 
the buffer. New alerts will overwrite any old alerts that are: 
o Not Done (Status = 4) 
10 o Done, or Success (Status = 5) 

o Invalid (Status = OA) 
An overrun error will occur if the old alerts are: 
o reserved (Status = 1) 
o pending (Status = 2) 
is o processing (Status = 3) 

Continuing to describe the embodiment of the present invention being discussed functionally, when the Get 
Alert Log command is issued from the remote (i.e., via terminal 34 in FIG. 1), the alert log will appear as it is 
at that time. Right after viewing, several changes occur within the log, and the status of out-of-band alerts 
change. These changes occur only on those alert entries that are viewed. The changes will show when the 
20 Get Alert Log command is issued again. 

1. The alert type Not Done (Status = 4, and 7) will be marked Done (Status = 5) because those Alerts in 
the Log that have been viewed, are considered delivered. 

2. When the Get Alert Log is issued, the following alert status wll not change: 

o pending (no attempt has been made to deliver yet, Status = 2) 
25 o processing (in the process of being delivered, Status = 3), or 

o invalid (will not be delivered. Status = OA) 

3. If the Get Alert command is issued with the number of entries equal to zero, alert entries status = 4 and 
7 will be marked Done on all the entries in the log even though none were actually viewed. 

The following effects are valid at the time the Get Alert Log is issued. 
30 1 . The alert log will not contain entries for alerts that were in the process of being added to the alert log. 

For instance, if the alert log had previously stabilized at 32 entries, and the command is issued while a 
new one is being built, only 31 will be returned. One will be displaced (only 32 entries are allowed) and 
the new one is not yet valid. 

2. If the user requests more log entries than currently exist in the alert log, only those in the log will be 
35 returned. If the user requests more than 32 entries, an invalid log number (18h) error code will be returned. 

3. If more alerts have been generated than the alert buffer can hold, new alerts will be discarded and a 
log overrun (01 h) will show on the Extended Error code when the Get Alert Log command is issued. The 
log overrun will be cleared after each Get Alert Log. 

Regarding load configuration, if the board 13 has not been configured, alerts cannot be sent or received. 
40 ff Load Configuration (for reconfiguration) is issued while the alert log has any valid entries and a new alert 
destination list is assigned: 

1. All out-of-band alerts that have been delivered to at least one alert destination in the old list will be 
marked Invalid in the Alert Delivery Status. These alerts will not be delivered to any other destinations. 

2. If none of the alert destinations members have received the alert or an alert status is processing: 

45 A. The Destination Member Status wll be zeroed out, and the retry count fled will be updated according 

to the new configuration. 

B. The Alert Delivery Status will be marked Not Done (Not Done; Status = 4). 

C. The retry process will attempt delivery to the members of the new Alert Destination list 

The user may receive an alert twice if an alert was in process and reached a destination. The retry task 
so will send this alert again according to the new Alert Destination list 

Duplicate alert destination members will be treated separately; the user wOl receive one alert for each time 
that member appears in the list 

The command Feature Control allows the user to disable alerting by setting bit 2 of the Feature Control 
Rag to 1. 

55 The alert log will change in the following manner 

1. All new alerts will be discarded. 

2. All out-of-band Alert Delivery Status will be marked Invalid (Status = OAh) and will not be delivered. The 
Destination Member Status will still show which members have received the alert 
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3. In- band alerts will be marked Invalid (Status = OAh). 

If the asynchronous interface has been disabled (bit 2 of Feature Control Flag set to 1): 

1 . All new alerts wfll be entered into the alert log. 

2. The out-of-band Alert Delivery Status (pending-Status = 2, and processing - Status = 3) will be marked 
5 Not Done (Status = 4). These alerts will be delivered later. 

3. The retry count will not decrement will the asynchronous interface is re-enabled and alerting resumes. 
Discussing now the retry portions of the embodiment of the present invention being described in detail, 

the retry count, plus one, is the number of times the board 13 will try to deliver the alert If the retry count ts 
zero, the board will still try to delivery the alert at least once. 
10 Whenever the board fails to deliver the alert message the retry count will decrement, the board will dis- 

connect the session and try another destination member. For a failed alert the retry interval will be 6 minutes. 
A failed alert may occur because a connection could not be established (will try the next destination member 
on list) or because the remote returned a value other than success (will try the first destination member in the 
list). 

15 Once there is a valid connection with any destination member, whether initiated by the board or by a remote, 

those alerts that have been marked as Failed will be delivered. Those marked as Not to be Delivered (not the 
right time and date) will also be delivered because the date and time mask only restrict the board from attempting 
a call, not from delivering alerts. If either of these cases fails to successfully complete the delivery of an alert 
(proper response is not received by the board), the board will disconnect 

20 If a remote calls in that is not in the Destination Member list no alert wfll be sent to that remote. 

Set forth immediately below are a number of examples of structure and operation of the embodiment of 
the present invention being discussed in detail herein. 



25 



30 



Example 1: 

If the user configures the system to have 5 alert destination members, the board will try to establish the 
connection in order (starting from member 0). Assume the retry count is set to zero (only one try will be made 
per destination) and there is no date and time mask specified. If the board fails to establish a connection with 
destination members 0-2 and succeeds to establish the connection with and send the alert to member 3, the 
alert log will be marked as follows: 



35 



40 



Alert Delivery Status = Not Done; Status 4 


Alert Destiraticn 


Destiraticn Hater Status 


member 0-2 


Failed 


member 3 


Success 


member 4 


To be delivered, (has not been 
tried yet - retry count « 0) 



45 



50 



The board could not deliver the alert to members 0-2 and moved on to 3. These alerts will not be tried 
again because the retry count was zero, but will be delivered if a connection is made to these members at a 
later time. The board has not tried to establish a connection with member 4, so the retry count is zero, and the 
alert will be tried once. 

The Alert Delivery Status is Not Done (Status = 4) because not all the members have been tried. 
Example 2: 

Using the same example, but a retry count of 5 for each destination member and no time and date mask: 



55 
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Alert Deliver Status - Hat Dene; Status = 4 


Alert Destination 


Destination Malta: Status 


member 0-2 


To be delivered— retry count « 4 


member 3 


oomection — discennect. 


mesriber 4 


To be delivered retry count = 5 



For members 0-2, the alert has not been delivered, but one try has been made to each. Five more tries 
will be made to these members. (It should be recalled that a try will be made when the retry count equals zero.) 

Member 3 received some other value besides success and was disconnected. The next alert to be tried 
will be member 0. 

Member 4 has not been tried yet 

Example 3: 

Using the same example, with a retry count of 5 for each destination member and no time and date mask 
this example shows the status before any attempts have been made: 



Alert Delivery Status - Hot Dene; Status = 2 


Alert Destimticn 


Destimticn MlMail Status 


member 0-4 


Retry = 5; no attenpt has been made 
en any destination. 



Example 4: 

Using the same example, with a retry count of 5 for each destination member and no time and date mask, 
this example shows the status as the first attempt is in progress: 



Alert Delivery Status - Not Done; Status = 3; processing 


Alert Destination 


Destination Heater Status 


mesriber 0 


To be delivered (status 100) ; Retry = 5; 



Example 5: 

In this example, the retry count is 5 for each destination member, and the date and time mask has been 
set to deliver alerts on Monday 8:00 a.m. - 5:00 p.m. only. The current time is Monday 8:00 a.m. 
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Alert Delivery Status - Not Dane; Status — 7 




Alert Destinaticn 


Destination Hester Status 


The Ka£* 


member 0 


will not be delivered in current time 
frame, (status Oil) 


Friday 8:00 a.m.- 
5:00 p.m. 


neuter 1 


Suooess (status 001) 


Monday 8:00 a.a.- 
5:00 p.m. 


member 2 


To be delivered (status 100) ; 
Retry = 5; 


Monday 8:00 a.m.- 
5:00 p.m. 



Member 2 is currently being processed, thus the overall Alert Delivery Status is Not Done (Status = 7). 
Example 6: 

In this example, the retry count is 5, and the date and time mask has been set to deliver alerts on Monday 
8:00 a.m. to 5:00 p.m. only. The current time is Monday 8:00 a.m. The entire list has been tried at least once. 

A session has been established by remote destination member 0, thus the alerts marked as Will Not Be 
Delivered In Current Time Frame will be delivered. If this same alert had been marked Failed, (retry count was 
met no more tries will be made) the alert would be delivered (Failed-*Success). 



Alert Delivery Status - Not Dene; Status — 4 


Alert Destination 


Destination Mofcex- Status 


rise Ask 


member 0 


Will not be delivered in current time 
frame. — > Suooess* 


Friday 8:00 a.m.- 
5:00 p.m. 


member 1 


Suooess (status 001) 


Monday 8:00 a.m.- 
5:00 p.m. 



In the embodiment of the present invention being discussed in detail herein, connect flags determine which 
alert destination members should receive an alert 

The retry count is indicated in the connect flag bits 0-4. Thus for each destination member it is possible 
to have a different retry count For example, if member 0 has the connect flag set to four, that member will 
have a retry count of four (5 tries will be made). Member 1 could have the connect flag set to 5, meaning the 
retry count is five. Zero means do not retry the alert, but the alert wil be tried once. 

Bit 5 and 6 of the connect flags have the following meanings when there is an alert to be delivered: 
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Bit 6,5 


HBcmincj 


00 


Blank Brtry. None of the alerts will be delivered to this 
destination. 


01 


Alert. The board will establish the connection and deliver 
the alert to this destination ranter. Call back feature is 
disabled. 


10 


Call Back. The board will not initiate the connection. If a 
connecticn exists the board will deliver the alert. Call back 
is enabled for this destination neater. 


11 


Alert ard call back. The board will establish the connection 
and deliver the alert to this destination menber. Call back 
feature and alert feature are enabled. 



With respect to voice alert procedure in the embodiment of the present invention being discussed in detail 
herein, communication between the enhancement board voice circuit and the user is through a touch tone tel- 
ephone. Upon receiving a voice message from the Enhancement board, the user needs to communicate with 
the board by pressing the appropriate touch tone button. 

Listed below are the steps for communicating with the board in the embodiment of the present invention 
being discussed: 

1. As soon as dialing has been completed by the board, the voice message will state one or more identi- 
fication numbers. The board cannot detect when the phone has been answered due to hardware limitations. 
Thus the message will begin as the phone is ringing. In order to allow the user to hear a complete message, 
the message will repeat three times. When the user first answers the phone, the message may be in pro- 
gress. 

2. Next, the board will request a password. After the password is entered the user may press # to indicate 
he has completed the password. 

Please enter password then press pound sign to continue. 
If the user does not enter the password within 5 seconds, the message will be repeated 3 more times before 
the board hangs up the phone, rf the user enters the wrong password and realizes his error before pressing 
the pound sign (#), he may simply type an asterisk (*), and then retype the correct password followed by 
the pound sign (#). 

The user has 3 tries to enter a correct password. After 3 faiures, the board will hang up. 

The board will wait up to 5 seconds for each password digit If the user fails to enter the next password 

digit within the limited time, the board will terminate the session and hang up the phone. 

3. After entering a correct password, the voice gives the alert message. For example the voice may state: 

Alert message number 255. 10:30 a.m. January 5. 

4. Next the voice will give instructions for repeating, continuing or ending the session: 

Press 1 to repeat, press 2 to continue, press 3 to end session 
The user has 5 seconds to respond before the message repeats up to a maximum of 3 times. If the user 
does not respond, the board will terminate the session and hang up the phone. Pressing 2 or 3 marks the 
alert as success in the Destination Member Status for that connect member. 

5. If the user presses 1, the message wHI repeat. 

6. If the user presses 2, the next alert message will be heard, or if there are no further alert messages, 
the end of session message will occur and the board will hang up the phone. 

7. If the user presses 3, the end of session message will occur. 

End of alert session. 

If the user enters a number other than 1 , 2, or 3 when prompted, the current alert message will be termin- 
ated and the whole alert message wilt be repeated within 5 seconds. The digit entered will be ignored. The 
correct digit should be reentered. The user must enter a 2 or 3 to acknowledge the message, or the board will 
mark the attempt as Failed and disconnect 

If the user enters the prompt digit or password digits before the board has finished the previous message, 
the message will be chopped immediately and a new message corresponding to the action chosen will occur. 
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As previously mentioned, alerts can be delivered to a pager. Each pager can only receive one alert per 
call. The sequence is listed below. 

1 . When an alert is sent to a paper, the pager will display: 

the five digit server ID followed by - and three digits 
5 For example: 

12345-001 

This indicates that server 1 2345, has error number 1 . 

2. The error should be looked up in a spec provided to the user. 

When a remote console receives an alert a windows application or the like can create a window that de- 
10 scribes the alert Effecting at least simple versions of this operation are well within the ability of those skilled 
in the art 

Listed below are examples of how the board 13 can announce the time, date and system ID. 



Time 


0:0 


TWelve A.M. 


0:30 


Twelve thirty A.M. 


5:00 


Five A.M. 


6:06 


Six O six A.M. 


9:10 


Nine ten A.M. 


10:15 


Ten fifteen A.M. 


11:45 


Eleven forty five A.M. 


12:00 


Twelve P.M. 


12:22 


Twelve twenty two P.M. 


13:35 


One thirty five P.M. 


22:30 


Ten Thirty P.M. 


23:59 


Eleven fifty nine P.M. 



45 



SO 



55 
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Bote 


Date: 


U.S.A. 


European 


1/1 


January one 


Cue January 


7/29 


July twenty nine 


IVjenty nine JUly 


8/17 


August seventeen 


Seventeen August 


9/21 


September twenty one 


Twenty one September 


10/5 


October five 


Five October 


10/6 


October six 


Six October 


11/20 


November twenty 


Twenty November 


12/24 


December twenty four 


T\*»nty four nenember 



systa ID 


12045 


One two rero four five 



Vbdoe Mpibwjb lists- 


125 


one twenty five 


200 


two hundred 


53 


fifty three 


105 


one oh five 


100 


one hundred 



Embodiments of the present invention may generate alert messages on board 13. The following table de- 
picts six example board-generated alerts and their meanings. 
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Object 




Mooning 


In- 


out-of- 


System S/W 


Watchdog 


oyS* no XGtTjer * * miiuUCaviJ^ 

with sys. software. 




y 


System S/W 


Interface F^il 


sys. software taiiea to 
complete a conmand to board 
or in-band alert failed. 




v 

A 


System H/W 


Power Fail 


Sys. power is bad. 




X 


System H/W 


Reset 


Sys. reset detected. 




X 


System Mgr H/W 


Interface Tedl 


EMIC device no longer 
functioning. 




X 


System Mgr H/W 


Ocnm Fail 


External modem failure. 


X 




System M^r H/W 


Battery P*il 


board's battery is no longer 
functional. 


X 


X 



25 Referring now to FIG. 4, there is shown a flow chart illustrating steps in the operation of an embodiment 

of the present invention. At the top of the chart it may be seen that information may come to the board 1 3 from 
either host software or bus monitoring. This information can be used to update a portion of random access 
memory if the information is, e.g., greater than a threshold value. This portion of the process of the present 
invention is indicated by blocks 80, 82 and 84 in the flow chart of FIG. 4. If in-band alert delivery is appropriate, 

30 an in-band alert may be issued as previously discussed (blocks 86, 88). If out-of-band alert delivery is appro- 
priate, out-of-band alerts may be issued as also previously discussed (blocks 90, 92). Retrying as discussed 
herein above is depicted by blocks 94, 96 with respect to out-of-band delivery. Similar retrying could be effected 
in in-band delivery in embodiments of the present invention, as previously discussed. Once delivery is com- 
pleted, the process is done (block 98). 

35 Those skilled in the art should now appreciate that the present invention provides an in-band out-of-band 

alert delivery system that is much improved over prior art alert delivery systems. The alert delivery system 
according to the teachings of the present invention is based upon a very effective underlying algorithm which 
effects persistent retrying and alert delivery to a number of different types of alert receivers. The alert delivery 
system according to the teachings of the present invention is well suited to delivery alerts with respect to EISA- 

40 based components in data commrnunfcation network environments. 

Those skilled in the art will recognize that many modifications and variations besides those specifically 
mentioned may be made in the techniques described herein without departing substantially from the concept 
of the present invention. Accordingly, it should be clearly understood that the forms of the invention as described 
herein are exemplary only and are not intended as a limitation on the scope of the invention. 

45 

Claims 

1. For a computer network having at least one computer system operatable therein, said computer system 
w having a plurality of components interconnected by a system bus for transferring information between said 

components, a manager for said computer system, comprising: 

means for monitoring information transfers along said system bus; 

a processor connected to said monitoring means, said processor determining alert conditions 
based upon said monitored information transfers and generating alerts upon determining said alert con- 
55 ditions; 

a console for receiving alerts from said processor; and 

means for transferring said alerts generated by said processor to said console, said means for 
transferring alerts comprising: 
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a preconf igured log specifying how a detected alert should be delivered; 
means for delivering alerts out-of-band; 

means for transmitted alerts to be delivered to the appropriate delivery means based upon 
information in said preconf igured log; 

means for determining whether an alert is successfully delivered; and 

means for retrying delivery of an unsuccessfully delivered alert until that alert is successfully 

delivered. 

A system manager according to claim 1 wherein said console is remotely located and whereby said means 
for transferring said alerts generated by said processor to said console further comprises interface means 
for asynchronously transferring said alerts to said remote console. 

A system manager according to claim 2 wherein said computer network further comprises a network man- 
ager and a local console accessible to said network manager via said network, and wherein said system 
manager further comprises: 

means for interfacing with said network manager, said interfacing means providing for the transfer 
of alerts from said processor to said network manager; 

wherein said alerts generated by said processor may be selectively delivered to said remote con- 
sole via said asynchronous transfer means or to said local console via said network manager. 

A system manager according to daim 2 wherein said system manager further comprises a telephone and 
said means for transferring alerts further comprises a modem connected to said processor, wherein said 
alerts generated by said processor may be selectively delivered to said remote console via said asyn- 
chronous transfer interface means or to said telephone via said modem. 

A system manager according to claim 2 wherein said system manager further comprises a pager and said 
means for transferring alerts further comprises a modem connected to said processor, wherein said alerts 
generated by said processor may be selectively delivered to said remote console via said asynchronous 
transfer interface means or to said pager via said modem. 
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